Logging in to Workday using Identity Server

The following topics guide you through configuring Workday and the WSO2 Identity Server (IS) to enable logging into Workday through the WSO2 IS. 

Prerequisites 

1. A Workday administrator account.

2. The WSO2 extracted public certificate (wso2carbon.jks).

Configuring Workday

1. Login to the Workday account as an administrator.

2. Open the Edit Tenant Setup and click Security. 

3. Select the Enable SAML Authentication checkbox.

4. Enter the identity provider name and the issuer as follows.

   • Identity Provider Name: wso2_is

   • Issuer: localhost

   Open

   

5. Add the public certificate of the Identity Provider (which you extracted as a prerequisite)  

6. Click on create and insert Name, Valid To, Valid from, and the certificate in the interface that appears.  

7. Enable the Workday initiated logout as seen below. 

8. Set the following environments.

9. Generate a private key pair if you do not already have one. This certificate will be used inside the WSO2 IS to validate the incoming authentication and logout requests from Workday.

   Open

   

10. Enter the following details and click OK. Finally, click Done.

Configuring WSO2 IS

1. Start the IS server and log in to the management console.

2. Navigate to Service Providers>Add under the Main menu and add a new service provider. 

3. Expand the Inbound Authentication Configuration section, then the SAML2 Web SSO Configuration Section and click Configure.

4. In the form that appears, fill out the following configuration details required for single sign-on and click Register.
   

   
   See the following table for the details. 

5. Click Update to save. 

6. Access the ACS URL from your browser to login to Workday using the WSO2 IS: https://www.myworkday.com/<Your workday tenant name>/login-saml2.flex.